The provisions that matter—and the mistakes that can weaken an NDA
A Non-Disclosure Agreement (NDA) is one of the most common legal documents used by businesses. It is also one of the easiest to copy incorrectly.
That is part of the problem.
An NDA can look perfectly professional while containing provisions that are too broad, too narrow, incomplete, or difficult to enforce. Those weaknesses may remain invisible until someone actually needs to rely on the agreement.
Writing a useful NDA starts with making a handful of important decisions in the right order.
possible one.
Limit internal access
Not everyone at the receiving organization needs access.
Access should generally be restricted to people who actually need the information and who are subject to confidentiality obligations that are equivalent or otherwise appropriate.
Require notice of unauthorized disclosure
If confidential information is accidentally or improperly disclosed, the recipient should have an obligation to notify the disclosing party promptly.
The earlier the problem is identified, the more opportunity there may be to limit the damage.
Step 5: Decide how long the NDA should last
A confidentiality obligation does not automatically become stronger simply because it lasts forever.
In some jurisdictions, indefinite confidentiality obligations can actually be more difficult to enforce depending on the information and circumstances.
A practical starting point is:
- Two to three years for ordinary commercial information such as pricing, plans, and customer details that may lose value relatively quickly
- Three to five years for technical and product information
- Longer or indefinite protection for genuine trade secrets, generally handled through a specific carve-out rather than applied to every piece of information
There are also two different periods to consider.
Disclosure period: How long can information be disclosed under the NDA?
Survival period: How long do confidentiality obligations continue after the relationship or disclosure period ends?
They are not necessarily the same.
Your agreement should make both clear.
Step 6: Address the return or destruction of information
What happens when the relationship ends?
An NDA should normally require the recipient, upon request or termination, to return or destroy confidential information and provide written confirmation when appropriate.
There is one practical complication.
Modern organizations have automated backups, archived systems, and regulatory record-keeping requirements. A company may not be able to immediately erase every technical copy.
A sensible NDA can therefore include limited exceptions for:
- Automated backups
- Copies retained because of legal requirements
- Regulatory record-keeping obligations
The goal is to create an obligation the recipient can actually follow.
Step 7: Finish with the essential legal provisions
The final sections of an NDA may look routine, but they still matter.
No licence
Disclosing intellectual property does not transfer ownership or automatically grant the recipient a licence to use it.
The NDA should make that clear.
No obligation to complete the transaction
Signing an NDA does not mean either party is required to proceed with the proposed business relationship, investment, transaction, or project.
The confidentiality agreement protects discussions without committing the parties to the underlying deal.
Remedies
Financial damages may not adequately compensate someone after confidential information has already been leaked.
An NDA should therefore address the ability to seek injunctive or other appropriate equitable relief, subject to applicable law.
Governing law and jurisdiction
Specify which law governs the agreement and where disputes will be handled.
An NDA without a clear jurisdiction framework can create unnecessary disputes before anyone even reaches the underlying confidentiality issue.
Signatures
Use the correct legal names of the parties, obtain the appropriate signatures, and include witness provisions where the relevant jurisdiction requires or recommends them.
Getting the parties and signatures right
An NDA can contain excellent provisions and still have a serious problem if the wrong party signs it.
Use the registered legal entity name
A trading name may not be the same thing as the legal entity entering into the agreement.
If the wrong entity is named, enforcement can become a dispute over who actually agreed to the NDA.
Confirm the signatory’s authority
The person signing on behalf of a company should have the authority to bind that organization.
For significant agreements, confirm that the signatory actually holds the position or authority they claim.
Think about subsidiaries and affiliates
Suppose confidential information will be shared with a company’s subsidiaries or affiliates.
Those organizations may not automatically be bound by an NDA they never signed.
You can address this by naming relevant affiliates in the agreement or requiring the contracting party to remain responsible for their affiliates’ compliance with the confidentiality obligations.
Sole traders and freelancers
A sole trader or freelancer generally signs in their own name rather than through a separate corporate entity.
That is normal.
The important consequence is that the confidentiality obligation attaches to the individual personally.
If someone sends you their NDA
You won’t always be the person drafting the agreement.
Sometimes the other party puts their NDA in front of you and asks for a signature.
The instinctive response—“It’s only an NDA; I’ll sign it”—is worth avoiding.
Before signing, check at least these four areas:
1. Is it mutual or one-way?
If both sides will disclose confidential information, a one-way agreement may protect only the other party.
2. How broad is the confidentiality definition?
An extremely broad definition combined with a lengthy confidentiality period can restrict your activities more than you expect.
3. Does it contain non-compete or non-solicitation provisions?
An agreement presented as an NDA may contain restrictions that go beyond confidentiality.
Look for provisions affecting competition, hiring, solicitation, customers, employees, or business relationships.
4. What is the term, and which obligations survive?
Don’t look only at the overall contract term.
Check how long confidentiality obligations continue after the agreement ends.
The AI Document Analyzer can help surface these issues quickly.
Five NDA mistakes worth avoiding
1. Defining everything as confidential
An “everything is confidential” approach can make the obligation difficult to apply and may weaken the agreement.
2. Leaving out exclusions
Without standard exclusions, the agreement can become unnecessarily broad and potentially unreasonable.
3. Failing to limit permitted use
If the NDA does not clearly restrict how information may be used, the recipient may have more freedom to use it than you intended.
4. Applying a perpetual term to ordinary commercial information
Not every piece of business information remains sensitive forever. An indefinite obligation may be unnecessary or counterproductive for information that becomes commercially irrelevant after a few years.
5. Signing the other party’s NDA without reviewing it
If someone sends you their NDA, read the obligations before signing.
The AI Document Analyzer can help identify important provisions and potential risk clauses before you agree to them.
The faster way to create an NDA
The decisions described above are built into the AI NDA Generator.
Provide the relevant details—who is involved, what information needs protection, how long confidentiality should apply, and which jurisdiction governs the agreement.
The platform can then generate a complete draft in about a minute, whether you need a mutual or one-way NDA and with the selected country taken into account.
You can then use this guide as a review checklist.
Frequently Asked Questions About NDAs
How long should an NDA last?
For most ordinary commercial information, two to five years is a practical range. Trade secrets may justify longer or potentially indefinite protection. The appropriate period depends on how long the information is expected to retain its confidential or commercial value.
Should I use a mutual or one-way NDA?
Use a one-way NDA when only one party will disclose confidential information. A mutual NDA is appropriate when both sides will share sensitive information. For partnerships, negotiations, and other two-way business discussions, mutual protection is often the safer choice.
Does an NDA need to be notarized?
Generally, no. NDAs are commonly made binding through execution by the relevant parties without notarization. However, legal requirements differ between jurisdictions, so local requirements should be confirmed when necessary.
Can an NDA be enforced?
Yes, an NDA can be enforceable when it is properly formed and executed, reasonable in scope and duration, supported by any legally required consideration, and otherwise compliant with applicable law. Overly broad provisions may be limited, rejected, or otherwise treated differently depending on the jurisdiction.
What cannot an NDA prevent?
An NDA generally cannot prevent disclosures that the law requires, legally protected reports of unlawful conduct, or certain forms of protected whistleblowing. Some jurisdictions also restrict agreements that attempt to prevent people from reporting harassment, misconduct, or illegal activity to appropriate authorities.
Is an NDA the same as a non-compete?
No.
An NDA protects confidential information by restricting disclosure or unauthorized use. A non-compete generally restricts certain competitive activities or working relationships.
They serve different purposes and can have very different enforceability requirements.
Do I need an NDA before every meeting?
No.
An NDA is most useful when a discussion involves genuinely sensitive information that is not already protected by another legal obligation. Requiring an NDA for every introductory conversation can add unnecessary friction, particularly when no meaningful confidential information will be disclosed.
Can I write an NDA myself?
Yes. A straightforward NDA can be prepared using a clear structure and appropriate provisions. However, if the information has substantial commercial value or the arrangement is unusual or high-risk, professional legal review is advisable.
What to do next
Create an NDA
Use the AI NDA Generator to create a structured draft, or choose the Free NDA Template if you prefer a traditional form-based approach.
Find an NDA for your situation
Explore:
NDA for Freelancers · NDA for Startups · NDA for Employees
Related document
If your discussions are moving beyond confidentiality and into an actual business relationship, consider the AI Partnership Agreement Generator.
Explore more legal documents
Visit the Legal Document Center to browse additional document types.
Please note: IndigoEDocs produces AI-assisted drafts, not legal advice. When confidential information has substantial commercial value or your arrangement involves unusual or significant risks, have the NDA reviewed and confirmed by a qualified legal professional before relying on it.
